“Calhoun 


Institutional Archive of the Naval Postgraduate School 





Calhoun: The NPS Institutional Archive 
DSpace Repository 


Theses and Dissertations 1. Thesis and Dissertation Collection, all items 


2009-09 


Implementation of phased array antenna 
technology providing a wireless local area 
network to enhance port security and 
Maritime interdiction operations 


Rivas, Andrew P. 


Monterey, California. Naval Postgraduate School 


http://hdl.handle.net/10945/4628 


Downloaded from NPS Archive: Calhoun 


Calhoun is the Naval Postgraduate School's public access digital repository for 


: \§ D U DL EY research materials and institutional publications created by the NPS community. 
«iis cic, Calhoun is named for Professor of Mathematics Guy K. Calhoun, NPS's first 


NY KNOX appointed -—- and published -- scholarly author. 


LIBRARY Dudley Knox Library / Naval Postgraduate School 
411 Dyer Road / 1 University Circle 


hitip:/finmacnpcedh Mibrary Monterey, California USA 93943 





NAVAL 
POSTGRADUATE 
SCHOOL 


MONTEREY, CALIFORNIA 


THESIS 


IMPLEMENTATION OF PHASED ARRAY ANTENNA 
TECHNOLOGY PROVIDING A WIRELESS LOCAL AREA 
NETWORK TO ENHANCE PORT SECURITY AND MARITIME 
INTERDICTION OPERATIONS 


by 


Andrew P. Rivas 


September 2009 


Thesis Advisor: James Ehlert 
Co-Advisor: Albert Barreto 





Approved for public release; distribution is unlimited 





TH 


IS PAGE 








NTENT 





ONALLY LEFT BLANK 





REPORT DOCUMENTATION PAGE Form Approved OMB No. 0704-0188 


Public reporting burden for this collection of information is estimated to average 1 hour per 
response, including the time for reviewing instruction, searching existing data sources, gathering 
and maintaining the data needed, and completing and reviewing the collection of information. Send 
comments regarding this burden estimate or any other aspect of this collection of information, 
including suggestions for reducing this burden, to Washington headquarters Services, Directorate 
for Information Operations and Reports, 1215 Jefferson Davis Highway, Suite 1204, Arlington, VA 
22202-4302, and to the Office of Management and Budget, Paperwork Reduction Project (0704-0188) 
Washington DC 20503. 


1. AGENCY USE ONLY (Leave blank) 2. REPORT DATE 3. REPORT TYPE AND DATES COVERED 
September 2009 Master’s Thesis 


TITLE AND SUBTITLE Implementation of Phased Array 5. FUNDING NUMBERS 
eae Technology Providing a Wireless Local Area 
Network to Enhance Port Security and Maritime 
Interdiction Operations 


7. PERFORMING ORGANIZATION NAME(S) AND ADDRESS (ES) 8. PERFORMING ORGANIZATION 
Naval Postgraduate School REPORT NUMBER 
Monterey, CA 93943-5000 

9. SPONSORING /MONITORING AGENCY NAME(S) AND 10. SPONSORING/MONITORING 

ADDRESS (ES) AGENCY REPORT NUMBER 
N/A 











11. SUPPLEMENTARY NOTES The views expressed in this thesis are those of the author and 
do not reflect the official policy or position of the Department of Defense or the U.S. 
Government. 


12a. DISTRIBUTION / AVAILABILITY STATEMENT 12b. DISTRIBUTION CODE 
Approved for public release; distribution is unlimited 


13. ABSTRACT (maximum 200 words) 

This thesis will focus on field testing to valuat th feasibility of employing 
electronically steered (phased array) antennas to provide a ship-to-shor wireless 
network connection (802.119) for littoral maritime assets. Specific areas being 
examined included the evaluation of voice, video, and other data transmitted from a 
maritime interdiction team, in real time, to a remote command and control center in 
support of a Visit Board Search and Seizure (VBSS) and Maritime Interdiction Operations 
(MIO). 








14. SUBJECT TERMS MIO, VBSS, electronically steered antenna, phased J 15. NUMBER OF 
array antenna, wireless network connection, Wi-Fi, IEEE 802.11g, | PAGES 
boarding team, COTS, WLAN, smart antenna, OpenVPN application, 101 


wireless base station, OFDM, latency, point-to-point wireless link. 16. PRICE CODE 


17. SECURITY 18. SECURITY 19. SECURITY 20. LIMITATION OF 
CLASSIFICATION OF CLASSIFICATION OF THIS CLASSIFICATION OF ABSTRACT 
REPORT PAGE ABSTRACT 

Unclassified Unclassified Unclassified UU 


NSN 7540-01-280-5500 Standard Form 298 (Rev. 2-89) 
Prescribed by ANSI Std. 239-18 























TH 


IS PAGE 








NTENT 





ONALLY LEFT BLANK 





aed 


Approved for public release; distribution is unlimited 


IMPLEMENTATION OF PHASED ARRAY ANTENNA TECHNOLOGY PROVIDING 
A WIRELESS LOCAL AREA NETWORK TO ENHANCE PORT SECURITY AND 
MARITIME INTERDICTION OPERATIONS 


Andrew P. Rivas 
Lieutenant, United States Navy 
B.S., Texas A&M University, 2002 





Submitted in partial fulfillment of the 
requirements for the degree of 





MASTER OF SCIENCE IN INFORMATION TECHNOLOGY MANAGEMENT 


from the 


NAVAL POSTGRADUATE SCHOOL 


September 2009 


Author: Andrew P. Rivas 


Approved by: James Ehlert 
Thesis Advisor 


Albert Barreto 
Co-Advisor 








Dr. Dan Boger 
Chairman, Department of Information Sciences 








dealt 





TH 


IS PAGE 








NTENT 





ONALLY LEFT BLANK 





iv 


ABSTRACT 


This thesis will focus on field testing to evaluate the 








feasibility of employing electronically steered (phased 








array) antennas to provide a ship-to-shore wireless network 
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I. INTRODUCTION 


A. BACKGROUND 


The threat of terrorist attacks against the United 





States and its interests worldwide has prompted development 








of our current national maritime strategy, which emphasizes 


the security of ports and the global maritime commons.! This 





daunting task of providing global stability to promote 





worldwide economic commerce has specific tenants that will 


rely primarily on the exchange of information over networks. 








The ultimate objective is to deliver timely 








intelligence, surveillance, and reconnaissance (ISR) 
necessary to achieve situational awareness by tactical and 


strategic decision makers throughout the chain of command 





and laterally among multinational partners and regional 
military and law enforcement through information sharing. 


Critical aspects of this objective are providing seamless 








wireless network coverage for littoral assets and the 


security of the sensitive but unclassified (SBU) information 











exchanged between multinational and DoD assets. 








Any wireless network infrastructure is only as good as 
its ability to provide security for users and information. 
The rapid advancements in network components, secure 


wireless communications, and mobile data devices have made 





possible the practical use of wireless networks in many 
current military and law enforcement applications in a 


variety of environments. 





1 Chief of Naval Operations, “Cooperative Strategy for 21st Century 
Seapower.” October 17, 2007. 


B. VISION 





Imagine the possibilities of a remote command and 
control (C*) cell in Manama, Bahrain, capable of watching a 


live video feed from a boarding, in support of Maritime 





Interdiction Operations (MIO), taking place in the vicinity 











of the Al Basrah Oil Terminals. Consider the benefits of key 
decision makers and intelligence analysts having instant 
access to real-time updates and raw intelligence gathered 
from the boarded vessel and its personnel by the Visit, 
Board, Search, and Seizure (VBSS) team members. Moreover, 
envision the value-added capability of the boarding team 


members capturing biometric data from the vessel’s crew and 





transmitting it from a laptop, deployed with the team 





onboard the vessel, to a biometric database located in 





Virginia for documentation and comparison against known or 
suspected terrorists. Think of the potential force 
multiplier of the boarding team’s ability to instantly 
transmit images of contraband, significant documents or 


intelligence, and observations made during the conduct of 





the boarding, in real time, without ever leaving the 





vessel’s pilothouse. The time and cost savings in manpower 





and tasking, and the reduction of risk in an unpredictable 
operating environment presents an intriguing prospect to 


leverage current and emerging wireless network technologies. 





Cc. APPLICATION 


Maritime security operations including port security, 





law enforcement, and MIO continue to be increasingly 








important missions in the Global War on Terror. Inherent to 


these constantly evolving mission areas is the ability of 


2 


the operator (VBSS boarding team member) to gather and 


quickly disseminate vital information in the form of 








documents, images, biometric data, and intelligence 





information for documentation and increased situational 





awareness. Sensitive information must get into the hands of 


the appropriate users, intelligence analysts and tactical 





decision makers, as quickly as possible. Current procedures 








for data, information, and intelligence gathering during a 
MIO boarding does not allow for digital transmission to the 
end users until after the VBSS team has completed the 
evolution or has physically returned portions of the 





information or data to its base of operation or afloat unit. 


The current process of transmitting information can take 





























hours, depending on the size of the boarded vessel, its 
crew, and the amount if intelligence or information 
gathered. The current methodology is extremely inefficient 
and results in time-late information to the end users, and 
places an enormous stress on the unit’s watchstanders 
supporting the boarding process. MIO boardings frequently 
place a heavy burden on voice communications between the 
boarding officer, on th vessel being boarded, and the 
afloat naval unit, creating unnecessary distractions for the 
VBSS Team as the chain of command constantly prods for 





progress updates throughout the conduct of the boarding and 


clarification of information passed over the tactical voice 








networks. 
Research will focus on the evaluation of the 
applicability and feasibility of employing shore-mounted 


electronically steered 


ship-to-shore 





operating in 


(phased array) 


wireless network 


the littoral 


e 


connection 


maritime 


antennas to provide a 
for assets 


environment. Field 


testing areas being examined include the evaluation of 


video, voice, and data transmission via a laptop to a remote 





command and control center from a VBSS Team member 








conducting a MIO boarding on a vessel which is either or 


anchored. Utilizing the described wireless network 





technique, the boarding team could broadcast all 


information, video, biometric data, and so forth to the 








entire MIO chain of command simultaneously, enabling MIO 
boardings to become safer for the VBSS teams, quicker in 


execution, and provide higher utility in the area of 





intelligence gathering and documentation. 





From ~a&. C? perspective, the MIO commander, ship 


Commanding Officer (CO), and all respective tactical action 








officers (TAOs) and watch captains would all have real-tim 


Situational awareness (SA) and updates as to the conduct and 

















progress of the boarding. Intelligence specialists would be 








able to receive key items of interest as they are discovered 


onboard the vessel of interest, instead of hours after the 





vessel has been released and the boarding secured. 


II. TECHNOLOGY BACKGROUND 


A. 802.11G WIRELESS PROTOCOL 


dy. Wireless Technology Advantages 


The use of wireless technologies, 802.11b/g Wi-Fi 


specifically, has many key advantages for the end user given 





specific operational situations. Wi-Fi is analogous to the 


IEEE 802.11 standard that operates in the 2.4GHz frequency 











spectrum. It is the most widely implemented wireless LAN 








(WLAN) technology defined by the Institute of Electrical and 





Electronics Engineers (IEEE) and regulated by the Federal 





Communications Commission (FCC) in the United States. The 





FCC has designated the 2.4-2.5GHz, Industrial Scientific 








Medical (ISM), frequency band as a license-free band for 
radio communications. This means that to operate in this 
frequency spectrum, one is not required to acquire any 
license or pay any fees as long as the equipment is 
authorized by the FCC. Operating in accordance with the FCC 
regulations also means that any WLAN equipment utilizing 


this ISM band for radio communications must adhere to the 





designated radio frequency, output levels, and 


indoor/outdoor environment requirements and limitations. The 





specifics of the equipment settings and limitations will be 


discussed later in this section. 





Given the regulations of the FCC, it is relatively easy 





to employ Wi-Fi WLANsS as most of the technology, regardless 








of vendor or manufacturer, can be integrated in a plug-and- 


play fashion. The Wi-Fi Alliance has gone to great lengths 


to ensure that Wi-Fi Certified products are standardized and 
interoperable as to further the use of the 802.11b/g 


wireless spectrum regardless of the manufacturer. This COTS 





interoperability mentality allows for ease of use and 








flexibility with networking component choices. 





Wi-Fi has a small physical footprint when compared to 
other wireless spectrum equipment. The deployment of 


antennas and their location can be less precise, as they do 





not need not be aligned and or sighted in to operate. Th 








2.4GHz signal emitted from wireless antennas covers the 
specific range of the transmitter. As long as the receiver 


(antenna) is within LOS of the maximum effective range of 





the transmitting wireless antenna or access point, a link 
can be made and sustained. This can be accomplished with 


very little equipment on the receiving end, as this relates 





to the specific application of the technology outlined 


below. 


Mobility and flexibility are huge advantages associated 





with Wi-Fi wireless technology. The option to wirelessly 








transmit information while in a remote location back to a 
wired network center or operations is a huge advantage that 


can be exploited. During a MIO Boarding, an emphasis is 








placed on voice communications to coordinate efforts between 


remote operators and the chain of command on a ship or at a 





specific C* operations center. Wireless technology and the 


ability to communicate utilizing multiple means is an 





important aspect of C” as. well as ‘SA. <A wireless. Link 








between th CoC and physically remote operators can also 


serve as a redundant form of communications if voice 
communications fail or cannot be used due to the operational 


environment. 4 


2. OFDM 





Orthogonal frequency division multiplexing (OFDM) is a 





digital modulation mode that divides a wireless signal into 





multiple sub-carriers of different frequencies, across a 


designated frequency band, and transmits them in parallel. 


a. Orthogonality 


Orthogonality, as it applies to general use and/or 


information technology vice complex mathematics, means to 





have the characteristic of independence and the ability to 


be utilized without it impacting something else. 
b. Frequency Division and Multiplexing 


The 802.11lg carrier signal is divided into several 





subcarriers, each for the transmission of data, each at 
different frequencies across the frequency band. These 
multiple narrowband signals are then multiplexed into a 


single combined channel and transmitted simultaneously 





across the wireless medium. 4 


2 Tom Carpenter and Joel Barrett, Certified Wireless Network 
Administrator (CWNA) Official Study Guide, Fourth Edition. August 17, 
2008, 5-18. 








3 Matthew Gast, 802.11 Wireless Networks: The Definitive Guide, 
Second Edition. April 25, 2005, 276-310. 





4 Ibid. 


c. 802.1l1g Variant 





OFDM is generally associated with 802.11la 





technology, the IEEE 802.11 amendment in which it was first 





introduced, however, the 802.1lg variation is known as 











xtended-rat physical OFDM (ERP-OFDM). This specifically 











differentiates the changes made to the technology 








implemented in the 2.4GHz ISM band (802.11g) from the 





original OFDM technique used in the 5GHz frequency band 
(802.11la). 


d. ERP-OFDM Advantages 


By employing this method of spreading the signal 


across the spectrum—theoretically not “spread spectrum 





technology,” but closely related—OFDM facilitates the us 














of a range of frequencies to transmit information at lower 





power levels. This, in turn, makes the wireless signal (s) 


extremely resistant to interferenc becaus of the lower 








power levels used in transmission. Because the (subcarrier) 
signals are transmitted over slightly different frequencies, 


multiple redundant communication signals are created which 





ensure that the signal is received, if the operating 





environment prevents the transmission of one of the 





frequencies. Another benefit of this transmission technique 





is that it prevents the overlap of bits (data) from 








reflected signals at the receiver, known as multipath 











distortion or intersymbol interference. The two most evident 








advantages of ERP-OFDM are greater spectral efficiency and 








the capacity for higher data rates.° 


5 Carpenter and Barrett, Certified Wireless Network, 117-125. 
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3. Data Rate vs. Throughput 


An important distinction should be made between 





throughput and data rate, and to some extent bandwidth, and 
how these terms relate to wireless network technology. 


Bandwidth can be compared to the diameter of a pipe, as the 





pipe represents the path of wireless communications. In this 





analogy, the diameter of the pipe represents the wireless 
spectrum available for the transmission of data, just as it 


physically represents the capacity to deliver fluid through 








it. Bandwidth is merely an indicator of the physical 
capacity to transmit data at designated rates. For this 


reason, the units associated with bandwidth should be 





megahertz (MHz) or kilohertz (kHz), which are measurements 
of the range of a given frequency band. Bandwidth should not 
be associated with the rate of data transmission, commonly 
measured in megabits per second (Mbps) or kilobits per 


second (Kbps). 


Throughput is the amount of functional data that is 
intentionally transferred across the wireless medium, or 


through the pipe. The data rate, or the rate at which this 





is accomplished, is a measure of the intended and the 





unintended data, such as overhead. As alluded to in the 
sections above, much of the designated frequency spectrum 


available for data transfer across th wireless medium is 





occupied by management frames, network protocols, and 
redundant data transmissions encoded into the wireless 
signals, all of which is collectively referred to as 


overhead. Because of overhead, the throughput of wireless 





networks will always be less than the advertised data rate.® 








6 Gast, 802.11 Wireless Networks: The Definitive Guide, 529. 
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Think of the data rate as a rating, just as piping systems 
are rated up to a maximum pressure setting. The operational 


pressures experienced by piping systems are normally much 





less than the maximum rating. The same is true for the 
actual throughput experienced in wireless communications. As 


illustrated in Table 1, rarely is the maximum value (data 





rate) reached in day-to-day wireless network operations. It 
is for this reason that the throughput is measured to 
represent the amount of actual data intended for transfer 


over the wireless network.’ 


Standards 
Introducing Estimate of 
PHY the PHY Data Rate Throughput 
1 
1 





FHSS | IEEE 802.11-1997 —2 Mbps 0.7—1 Mbps 
DSSS _| IEEE 802.11-1997 —2 Mbps 0.7—1 Mbps 


HR/DSSS | IEEE 802.11b-1999 | 1, 2, 5.5, and 3-6 Mbps 
11 Mhns 


IEEE 802.11g-2003 | 1,2,5.5, 11,6, | 3-29 Mbps 

9, 12, 18, 24, 
36, 48, 54 Mbps 

OFDM | IEEE 802.11a-1999 | 6,9, 12, 18, 24, | 3-29 Mbps 
36, 48, 54 Mbps 

HT IEEE 802.11n-2009 | 1-600 Mbps Untested 

(with 4 spatial 
streams) 


Table 1. Estimated throughput of data rates of wireless 
technology standards (from CWNA Official Study Guide, 
4th ed.). 








The easiest way to maximize the throughput on an ERP- 





OFDM wireless antenna system is to configure the hardware or 


antenna set to transmit in “g only mode.” The fact that the 








7 Carpenter and Barrett, Certified Wireless Network, 117-125. 
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antenna must send out redundant signals and then convert 
them to 802.11b, from 802.1llg, reduces the throughput of the 
antenna. This reduction in throughput is a direct result of 


increased overhead needed to make these conversions at the 














antenna. 


B. PHASED ARRAY ANTENNA TECHNOLOGY 


Phased array antennas are actually a system of multiple 


antennas that are connected to a signal processor. 





Adjustments are made to each of the antennas’ = signal 
strength and phase of signal transmission to form narrow, 


directed RF beams of energy. These individual beams of RF 





energy can be directed, or electronically steered, in 


different directions without the antenna ever moving. 








Instead of rotating the antenna to change the direction of 
the RF energy to cover a given area, the antenna remains 
stationary and the RF energy beams are directed to the 


client(s) as needed. This type of antenna technology is 





utilized in many air defense radar applications. 





1. Smart Antenna System 


A smart antenna must be able to electronically direct 


the RF energy beams directly to the wireless client, or 





receiving antenna. A technique utilized to accomplish this 








task over the coverage area of the base station is called 








beam switching. The base station will scan pre-determined 





coverage beams and as wireless clients are identified and 





authenticated the transmission of information across the 


wireless link occurs. & 





8 Carpenter and Barrett, Certified Wireless Network. 
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2. FCC Rules for Antenna Output Power 





In the United States, the FCC regulates the maximum 





output power of antennas based on their environment, 
frequency band, and type of link made, and the type of 
antenna. For the purposes of this thesis, we will 
concentrate on phased array antennas utilizing the 2.4GHz 


ISM band outdoors. 





a. PTP/PTMP Links in 2.4GHz ISM Band 


There are two distinct categories of wireless 


links regulated by the FCC: point-to-point (PTP) and point- 











to-mulitpoint links (PTMP). For PTMP links, the output power 





of the antenna must not exceed 4 watts. In addition, the 





total output power at the point of radiation, known as the 





intentional radiator, must be reduced by 3 decibels (dB) for 
every 3 dB of passive gain at the antenna. Passive gain is 
achieved by focusing or directing the output power of the 


Signal in a desired direction. PTP links must not exceed 1 





watt of output power at the intentional radiator. Also, the 


output power must be reduced by 1 dB for every 3 dB of 





antenna gain above 6 dBi. The limits of the PTMP and PTP 


links are illustrated in Tables 2 and 3, respectively. 
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Intentional 
Radiator Power | Antenna Gain | EIRP EIRP 
(dBm) (dBI) (dBm) | (watts) 





Table 2. PTMP power limit table for 2.4GHz ISM band (from 
CWNA Official Study Guide, 4th ed.). 





Intentional 
Radiator Power 





Table 3. PTP power limit table for 2.4GHz ISM band (from 
CWNA Official Study Guide, 4th ed.). 





Most engineers would agree that a phased array 





antenna system would fall under the rules as defined by the 





FCC for PTMP links. However, because phased array antennas 
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are able to direct narrow beams of RF energy directly to 
clients, these systems operate under an exception to the PTP 


link power limits.? 


b. Specific Guidelines for Phased Array 
Antennas 


The phased array antenna rules are established by 


the FCC in Title 47 of the Code of Federal Regulations Part 





15, or FCC 47 CFR Part 15. Under this guideline, which was 


revised most recently on July 12, 2004, the narrow beams 





emitted by the phased array antenna are each considered to 
be an individual PTP link. The total power of the antenna 
system, however, cannot exceed 8 dB above 1 watt, the limit 
for an individual beam. Also, just as the PTP link power 
rules state above, the total output power must be reduced by 
1 dB for each 3 dB in antenna gain above 6 dBi. These 


revisions to Part 15, Section 9 of the FCC Report and Order 





04-165 that have been discussed read as follows: 





In addition, the Commission proposed to allow 
sectorized and phased array systems to operate at 
the same power levels permitted for point-—-to- 
point directional antennas by limiting the total 
power that may be applied to each individual beam 
to the level specified in Section 15.247 (b), 
i.e., 0.125 watt or 1 watt, depending upon the 
type of modulation used. This change implies that 
when operating along multiple paths, the 
aggregate power in all beams could xceed th 

output power permitted for a single point-to- 
point system. We proposed, therefore, to limit 
the aggregate power transmitted simultaneously on 
all beams to 8 dB above the limit for an 
individual beam. This added restriction will 
allow a maximum of six individual beams to 
operate simultaneously at the maximum permitted 




















9 Carpenter and Barrett, Certified Wireless Network, 51-85. 
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power. If more than six individual beams are 
used, then the aggregate power must be adjusted 
to fall within the 8 dB limit. Finally, the 
Commission proposed that the transmitter output 
power be reduced by 1 dB for each 3 dB that the 
directional antenna gain of the complete system 
exceeds 6 dBi. This requirement is similar to the 
present rules for point-to-point operation in the 
2.4 GHz band (emphasis added) .1° 











Cc. OPEN VPN TECHNOLOGY 


1: Virtual Private Networks (VPN) 


A VPN is exactly what it sounds like: a private network 





established via the Internet, which services specific users 





and isolates the data exchanged between these users from 





other users on the Internet. They can be constructed using 


software or a combination of hardware and software.1!1! 


a. Tunneling 


Tunneling is the method and the meaning behind the 





“virtual” portion of a VPN. Just as a tunnel connects two 


different locations through a common path, a VPN connects 








users electronically and not physically, hence, the term 


virtually. The virtual connection between users, or clients, 








over the Internet can be achieved in a variety of ways. A 


commonly used connection method is a user at one end (of the 








connection) and a device that enables connectivity at the 
other end, such as a router or a server. This method allows 
multiple users to authenticate and access services or 


resources allowed by the VPN. 





10 Carpenter and Barrett, Certified Wireless Network, 85. 








11 Tamera D an, Network+ Guide to Networks, Fourth Edition. April 4, 
2005, 388-402. 
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b. Layer 2 OSI 


Another important facet of tunneling is that it 





takes place at the Data Link Layer, or Layer 2 of the Open 








Systems Interconnection (OST) Model £Or networking 


communications. 


See Table 4, where the physical packaging 


and transmission of network frames occurs. The tunneling 


protocol at the 





Data Link Layer encapsulates or completely 


encloses the higher-level protocol (Layer 3 - Network Layer) 





information so that it can be interpreted by a lower level. 


Encapsulation is 





like placing an envelope inside a larger 





envelope. 14 


OSI Model Layer 


Application (Layer 7) 


Presentation (Layer 6) 


Session (Layer 5) 


Transport (Layer 4) 


Network (Layer 3) 


Data Link (Layer 2) 
Physical (Layer 1) 


Function 


Provides interface between applications and network for interpreting appli- 
cation requests and requirements 


Allows hosts and applications to use a common language; performs data 
formatting, encryption, and compression 


Establishes, maintains, and terminates user connections 


Ensures accurate delivery of data through flow control, segmentation and 
reassembly, error correction, and acknowledgment 


Establishes network connections; translates network addresses into their 
physical counterparts and determines routing 


Packages data in frames appropriate to network transmission method 


Manages signaling to and from physical network connections 





Table 4. Functions of the OSI layers (from Network+ Guide 


12 Dean, Network+ 


to Networks, 4th ed.) 


Guide to Networks, 63. 
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c. SSL/TLS 


The information and traffic exchanged over the VPN 





tunnel is encrypted. VPN software encrypts and decrypts the 


data transmitted between clients and must be present at both 





ends of the connection to establish a secure path for 
communications. The result is network frames, within which 
data resides, that are encrypted from one client to the 


other, or end-to-end. Clients that wish to communicate over 





the VPN must have the same encryption keys installed in 
order to properly encrypt/decrypt the information over 


Secure Sockets Layer and Transport Layer Security (SSL/TLS), 





the commercial standard for client-server neryption 











schemes.13 It should be noted that the encryption occurs at 





Layer 4 of the OSI Model. Therefore, the encapsulated 





network frame at Layer 2 has already been secured by 


encryption at a higher level. 


2 OpenVPN 


OpenVPN is open source software that provides a VPN 


solution utilizing the technology elements outlined above. 





It specifically uses SSL/TLS as its encryption method. This 





software is utilized as the platform for the GHOSTNet 


application, which will be explained in more detail below. 


13 Markus Feilner, OpenVPN: Building and Integrating Virtual Private 
Networks: Learn how to build secure VPNs using this powerful Open Source 
application. November 5, 2006, 10-21. 
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III. EXPERIMENT METHODOLOGY 


A. TECHNOLOGY OVERVIEW 


The scope of this specific research encompasses the 





technology related to the Vivato 802.11b/g outdoor Wi-Fi 





base stations, the Ruckus sectored Wi-Fi router, and the 








GHOSTNet application. 


1. Vivato Antenna 


The Vivato VP2210 outdoor Wi-Fi base station, or access 


point seen in Figure 1, is a phased array or smart antenna 








system, which utilizes six radios to electronically steer 





and focus narrow radio frequency (RF) beams directly to 








individual clients. This beam steering capability is 





marketed as PacketSteering™ Technology and is the key 





component that nables xtended range with greater 





throughput than traditional wireless access points. 





Utilizing the 802.11lg protocol, the phased array antenna 


base stations are capable of providing network connectivity 





at distances greater than 6,000 meters (m), which is 


equivalent to 3.24 nautical miles (NM), 6 kilometers (km), 





or 3.73 miles (mi). The antenna’s wireless network coverage 





is approximately 100 degrees (horizontal axis arc) by 12 








degrees (vertical axis arc) with data rates of up to 56 


Mbps. The capable data rates are dependent upon the distance 





from the base station. The complete physical and technical 


specifications, including the detailed listing of capable 





data rates at designated distances from the base station, 


are listed in Appendix B. 
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Figure 1. VP2210 - Vivato Outdoor Wi-Fi Base Station. 
(From Vivato website) 


2. Ruckus Device 





The Ruckus Media Flex 2835 is a wireless router, seen 
in Figure 2, which utilizes a patented smart antenna system, 
called BeamFlex™, in order to maximize wireless network 


coverage in its immediate area, which may or may not have 





line of sight (LOS) with the wireless base station. The 





Ruckus device increases the wireless footprint of the Wi-Fi 
base station by providing extended range and higher data 
rates. The smart router system, however, must be able to 
associate with the wireless base station, and requires LOS 
to provide network coverage. The Ruckus device contains six, 


sectored directional antennas which automatically 





reconfigure themselves, in real-time, to provide the optimal 
wireless signal to an area of coverage equivalent to most 


commercial wireless routers. The device operates in two 








modes, bridge and router mode. In bridge mode, it acts as a 


wireless bridge device to connect two wired or wireless 





networks, or a combination of the two. In route mode, it 
acts as a wireless router, providing access to a wireless 


network that it is associated with. 
20 


Figure 2. Ruckus Media Flex 2835. (From Ruckus Website) 


ae GHOSTNet 


GHOSTNet is a secure, transparent, anonymous, Ethernet 





tunneling (OpenVPN) application. It is used to establish a 





secure connection by tunneling into a wired or wireless 
network infrastructure to communicate between other remote 


VPN enabled clients, or users, over untrusted and/or 





unsecure networks. Designed to secure communications by 





encrypting the information transmitted across the Internet, 





GHOSTNet also protects the true IP address of the client 
computer by making it anonymous. When GHOSTNet is enabled, 


the IP address reported by the client is in a completely 














separate physical location than the actual IP address being 





used by the client computer. These locations are 





predetermined and configured by remote servers, which enable 
GHOSTNet clients the attribute of anonymity. Clients wishing 
to establish secure communications utilizing GHOSTNet must 
have installed both the OpenVPN application and the GHOSTNet 


common keys, for encryption/decryption. 
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4. Testing Equipment 


a. Hardware 





Three laptops were used in the field testing of 
the Vivato-GHOSTNet Network. The laptops’ specifications are 


as follows: 











Dell® Inspiron 5100 laptop (1.0 GHz Intel Pentium 














processor; 512MB RAM; and Windows XP service pack 2) 








Two Apple® MacBook laptops (2.4 GHz Intel Core 2 





Duo processor; 2GB RAM; Mac OS X and Windows XP service pack 


2, running over VMware Fusion Virtualization software). 





b. Software 











Xia IxChariot was utilized as the network packet 





generation and analyzing software package to conduct and 





document all network performance tests. IxChariot simulates 
real-world network traffic and applications to predict 
device and system performance under realistic load 


conditions. This software package is comprised of the 





IxChariot Console, which generates and analyzes network 


packet traffic characteristics between Performance 





Endpoints. For these specific field tests, the IxChariot 





Console was loaded onto the Dell laptop and the endpoints 








were loaded onto the Dell and the two Macbook laptops. 


B. COASTS OVERVIEW 


The Cooperative Operations and Applied Science & 





Technology Studies (COASTS) is an international field 
experimentation program designed to develop and assess 


Commercial Off the Shelf (COTS) and leading edge 
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technologies for specific military, peacekeeping and 
Stability operations, law enforcement, and first responder 


missions. COASTS engages international and domestic partners 





at the research and development (R&D) level through 





cooperative science and technology field experimentation to 





investigate and match participant mission needs with 


integrated command and control, computers, communications, 











intelligence, surveillance and reconnaissance (C4ISR) 
solutions in domestic, bi-lateral and multi-national 
environments. COASTS conducts integrated, multi-phase 





scenarios to demonstrate and evaluate these C4ISR solutions 





over a series of fiv field xperiments (FEX I-V), which 





ultimately culminate at FEX V in the final demonstration 


scenarios. 


1. FEX-II/III 
































In January and February 2008, Field Exercise and 


were conducted at Camp Roberts, California, in the vicinity 





of McMillen Airfield. These two FEXs served as local site 








survey evolutions and network preparation exercises to 


determine requirements for FEX IV and V, the COASTS-08 final 














scenario and demonstrations in Thailand. McMillen Airfield’s 





strategic location provided a chance to deploy and test 





realistic network topologies and Jlink scenarios. The 


physical network architecture and layout that would be 








employed in Thailand during FEX IV and V was constructed 








using the runway, installations, and roads surrounding the 
airstrip, see Figure 3. Valuable lessons learned and 


network requirements were gathered from performing the 
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required tests on the actual equipment configurations that 


were planned to be demonstrated in the following months in 





Thailand. 














Also contributing to FEX was the United States 





Coast Guard (USCG), from the USCG Station Monterey Bay. The 





USCG provided the use of a 41-foot utility boat (UTB) for 
underway testing on Monterey Bay. The USCG UTB made it 
possible to conduct proof of concept testing for the 


wireless network provided by the Vivato phased array base 





station, Ruckus device, and GHOSTNet application. This field 
testing configuration would mimic the underway demonstration 


that would occur at FEX IV in Thailand. 





























Figure 3. Network architecture for FEX / at Camp 


Roberts, CA. 
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2. Proof of Concept Testing — FEX III 


The purpose of this preliminary phase of testing was to 


ensure that a basic test plan could be reasonably executed, 








under the reasonably moderate operating conditions of 


Monterey Bay, befor xpending time and resources on field 





tests in Thailand. With the assistance of USCG Station 





Monterey Bay, underway testing commenced on February 14, 





2008, during FEX 














a. Testing Concept of Operations (CONOPS) 


The concept of the test plan was to be able to 





transmit data and video wirelessly from an underway vessel 


on Monterey Bay using the 802.1lg signal provided by the 





phased array wireless antenna. GHOSTNet would then enable 


the video or data to be securely transmitted to remote 





locations via tunneling through the internet. Figure 4 
outlines the network architecture utilized in the testing, 
and will be used to better illustrate the conduct of the 


experiment. 
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Figure 4. Proof of concept testing network architecture. 


At the USCG Station, the phased array antenna, or 
Wi-Fi base station, was mounted overlooking Monterey Bay, at 
a height of eye of approximately 25 feet, seen in Figure 5. 


The Wi-Fi base station was connected to the USCG Station’s 








internet service provider (ISP) via a CATEGORY 5 Ethernet 





cable. The Dell laptop hosting IxChariot, was wirelessly 





associated to the base station and served as the shore 
endpoint for the network performance tests run between the 


USCG Station and the underway vessel on Monterey Bay. 


Onboard the 41-ft. USCG utility boat (UTB), which 
is seen in Figure 7, one of the Macbooks would serve as the 
underway endpoint for testing. Also aboard the UTB was a 
Ruckus device, or Wi-Fi router, which was mounted to the 


mast as seen in Figure 6, and an Axis 213 internet 
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protocol 





(I 


P) 


camera, 


which was configured to a 





Dell laptop 


and secured inside the pilothouse to capture and transmit 


video across the wireless network. 


Figure 5. 


Figure 6. 








Monterey Bay. 
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Phased array base station at USCG Station, 


Ruckus device mounted to mast of USCG UTB. 





Figure 7. USCG Station Monterey Bay 41-ft. utility boat. 


The focus of the testing was to observe the 
ability to transfer data packets and provide streaming video 
from the underway UTB to the USCG Station ashore, and to a 


remote command center (JOCC on McMillen Airfield) over 100 





miles away at Camp Roberts, California, seen in Figure 8. 


3 NM_Test 


2 NMoTest 


USCG StationiS 


© 
a 





Figure 8. Distance between Monterey Ba, and Camp Robert, CA. 
(From Google Earth) 
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The execution of the test plan would encompass 
running network performance tests at three specific 
locations of the UTB while underway on Monterey Bay. As 
shown in Figure 9, data and video tests were conducted over 
the network at two, three, and four nautical miles (NM) from 


the USCG Station. 





Figure 9. Proof of Concept testing on Monterey Bay. 
(From Google Earth) 


b. Weather Observations 


February 14, 2008, was a considerably rough day on 
Monterey Bay, especially underway on a 41-ft. UTB. A small 
craft advisory was in effect throughout the underway testing 


and maneuverability for optimal testing was limited. The UTB 








experienced swells of 5-8 ft., which impacted the conduct of 


testing, and will be discussed in greater detail in section 





VI, Results and Analysis. 
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3: FEX-IV/V 





Field Exercise IV and V, conducted in March and May 





2008 respectively, took place at Ao Manao Airbase near 


Prachuap Khiri Khan, Thailand seen in Figure 10. Ao Manao is 








located approximately 312 km, or 194 miles, south of 





Bangkok. All successful implementations of test equipment 


























and experiments at FEX and would be deployed at Ao 





Manao for further operational testing and development. For 





the Vivato-GHOSTNet wireless network specifically, FEX IV 





and V would be utilized to tie together previous network 





tests conducted at Monterey Bay and Camp Roberts. 
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Figure 10. GPS location of network performance tests 
conducted during FEX IV. (From Google Earth) 





a. Scope of the Field Testing 


The intent of the Vivato-GHOSTNet testing was to 


demonstrate the feasibility of utilizing an 802.11lg network 








over water and land in order to provide secure Global Data 








Dissemination (GD*) to physically remote operational 
commanders and their staff. From a remote C’ center, the 


planning staff and/or COC would have the ability to view and 
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receive video, voice, and data from a naval unit conducting 





a maritime interdiction operation (MIO) boarding on an 





underway vessel. 


b. Measures of Effectiveness and Performance 





The COASTS-—08 Field Exercises provided an 





environment in which to test the qualitative measurements of 
the Vivato-GHOSTNet Network. The Measures of Performance 
(MOPs) directed that bandwidth and throughput performance of 
a network were the most important factors for testing. The 


qualitative measures were formed by reviewing the COASTS-06 





and COAST-O7 after action reports (AARS) that showed 
considerable network degradation during high bandwidth usage 


and video streaming evolutions. 





For the Measures of Effectiveness (MOE), Ixia’s 





IxChariot was implemented to collect, display, and analyze 
the pertinent information related to network performance 
characteristics, which will be discussed in the sections 
below. The raw test data was collected and downloaded into 


two common file formats, ‘csv’ and ‘html.’ 


c. Selected Measures (Metrics) 


The metrics used for these tests were: throughput 





as measured by bulk transport capacity; response time—as 
measured by roundtrip delay and loss; and video streaming—as 
measured by throughput thresholds on video packets and the 
ability to view video free of hesitation, or visually 

delayed motion. 
(1) Throughput measures the maximum amount 


of intended data transferred across a communications link 
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or network. It does not include any additional packets or 


encryption overhead, which may be transferred due to strong 





encryption schemes implemented or multiple data 


transmissions over the wireless medium, which would 








constitute the total data rate. The method used to perform 


this measurement is to transfer a file of approximately 





30,000 bytes between two network nodes and measure the tim 





taken to receive the file without errors. The throughput is 








then calculated by dividing the fil size by the time to 








get the intended data in megabits per second (Mbps). 
(2) Response Time is a measure of 


ffectiveness related to the amount of time it takes a data 








packet to traverse a given distance. Essentially, it is the 








elapsed time between th nd of an inquiry on a computer 





system and the beginning of a response. Network performance 
monitoring tools were configured to measure and display 


various parameters characterizing communications between or 











among a pair of network endpoints, or nodes. In TCP/IP- 
based networks, one such parameter was the network Round 


Trip Time (RTT). AS a control measure, the RTT was measured 








from the shore-based endpoint location, which initiated 





IxChariot performance tests, to eliminate any 





inconsistencies related to tests taken at various 
locations. 

(3) Video Streaming refers to the ability 
of an application to play synchronized video media streams, 


in a continuous way, while they are being transmitted to 





the client over a data network. 
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d. FEX IV Field Testing CONOPS 


Three phased array antennas were mounted on a 


communications tower (Comms Tower) approximately 150 ft. 





high, seen in Figure 11. The antennas were orientated on the 


tower to cover the north, south, and west sectors 





respectively. The 100-degree horizontal arc of coverage of 
each antenna provided overlap coverage for testing over land 
and underway in the vicinity of Ao Manao, as shown in Figure 


12. 





Figure 11. Phased array antennas mounted on Comms Tower on Ao 
Manao Airbase in Thailand. 
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Figure 12. 802.1llg wireless coverage sectors by Vivato 
antennas mounted on Comms Tower. (From Google Earth) 





Multiple iterations of endpoint tests were 


conducted utilizing the three antennas mounted on the Comms 





Tower. The endpoint tests were initiated from the shore 








endpoint, the Dell laptop with IxChariot, to the remote 
endpoint, the Macbook, whether it was over land, over water, 


or underway on the north or south bay. 


Underway testing was conducted onboard a Royal 





Thai Navy (RTN) Fast Patrol Craft (PCF), seen in Figure 13. 
The PCF was 19.6m (64.3 ft.) in length, 5.3m (17.4 ft.) in 
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width, and had a draft of 2.85M (9.3 ft.). The configuration 


of sensors was nearly identical to that of the USCG UTB in 








Figure 4. The RTN PCF was loaded out with a Ruckus mounted 





to the mast, a Macbook onboard as the (remote) network 





testing endpoint, and an IP camera to capture video to be 


transmitted to remote viewers via the wireless network. The 








streaming video captured onboard the PCF was viewed at the 
Joint Operations Command Center (JOCC) on Ao Manao Airbase 


and at NPS in Monterey, California, via the Vivato-GHOSTNet 





network. Testing also took place at the PCF pier, seen in 
Figure 13 and 14, and underway in the south bay at various 


distances. 





Figure 13. Royal Thai Navy PCF pierside in Prachuap Khiri 
Khan, Thailand. 
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Figure 14. Testing device configuration onboard RIN PCF, for 
FEX IV testing in Thailand. 
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IV. RESULTS AND ANALYSIS 


A. PROOF OF CONCEPT TESTING 


On February 14, 2008, the day of testing, a small craft 





advisory was issued for Monterey Bay. Four total test runs, 


from three locations, were completed and the results are 





displayed in Table 5. 






































Distance Swells Round Trip % Packet Stream 
from Vivato | Observed Time (avg.) Loss Video 
antenna 

2 NM Sige ge 23 ms 0 % n/a 

3 NM SRE. 22 ms Boe '5 Yes 

4 NM Crt 8.5 ms 16 % n/a 

2 NM 6 res 19 ms 37 % Yes 
Table 5. Results of proof of concept testing underway on 


Monterey Bay —- February 14, 2008. 


1. Environmental Impact 





The larg swells ncountered on the bay by the UTB 
during proof of concept testing proved to be significant 


limitations in the completion of the evolution. The 





performance limitations of the wireless network included the 








height of the swells, which impeded the line of sight (LOS) 
between the Ruckus device (mounted to the UTB mast) and the 


phased array antenna (mounted at USCG Station). Following 





the 3 NM test, the Ruckus device ceased to operate, and was 


secured after it experienced seawater intrusion due to sea 





swells which contacted the mast and the pilothouse of the 


UTB. 
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The Macbook, on the UTB, maintained wireless 


association with the phased array antenna throughout the 








underway testing. Due to technical difficulties not related 








to the environmental factors, IxChariot endpoint tests were 





unable to be accomplished. Simple ping tests using the 


command prompt were substituted to gather some meaningful 





form of data transfer capability over the wireless network. 





Streaming video from the IP camera was successfully 





observed, at 2 and 3 NM tests, from the Dell laptop at the 
USCG Station and a Dell laptop at McMillen Airfield on Camp 











Roberts, California, via the GHOSTNet application. 





More complete weather data for this testing evolution 


is located in Appendix A. 


2. Observations from testing on Monterey Bay 


Given the environmental impact and technical 


difficulties encountered during the conduct of the underway 





proof of concept testing on Monterey Bay, there were several 


important takeaways from this experiment. 


a. Underway Data Transfer Capability 


The ability to wirelessly transmit and receive 





data packets from up to 4 NM from the shore-mounted phased 


array antenna was demonstrated. This was performed without 





the use of the Ruckus wireless router, which means that the 
shore-based antenna waS communicating with a_ laptop, 
underway on a vessel, via a wireless association to its 


network. 
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b. Underway Streaming Video Capability 


Streaming video from the UTB was’ successfully 
observed at a distance of 2 and 3 NM from the (shore 
mounted) antenna. Utilizing GHOSTNet, this video was able to 
be securely viewed by multiple remote Cc? centers including 


the USCG Station, NPS, and Camp Roberts. 


B. FEX IV TESTING -— THAILAND 


1. Environmental Impact 


Field Testing conducted over land and water (on the 





PCF) was conducted on March 24 and 25, 2008. With the 





exception of a thunderstorm mid-day on March 25, visibility 





was approximately four miles and relative humidity averaged 


90% for both days. The high and low temperatures recorded 








for March 24 were 96 and 76 degrees Fahrenheit and 91 and 77 
degrees Fahrenheit for March 25. The storm on March 25 was 
accompanied by rough seas, wind gusts, and heavy rain in the 


vicinity of Prachuap Khiri Khan and Ao Manao Airbase. This 





was Significant becaus du to this storm, the PCF was 
unable to get underway and remained made-up alongside the 
pier with storm lines. Although the PCF was pierside, and in 


spite of the dense rain, network test runs were carried out 





and successfully completed during the storm. Six distinct 








groups of tests were completed over the two-day field 


testing period. A more complete historical weather data for 





the two days is located in Appendix A. 
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2. Field Test Conduct 
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Figure 15. GPS plots of field testing locations IVO Ao Manao, 
Thailand. (from Google Earth) 





a. Test Group 1 — Baseline 





The first group of network test runs were executed 
in order to establish a baseline for the Vivato-GHOSTNet 


network. Results enabled the performance of the network to 





be measured without any users or encryption on the network. 





Endpoint 1 initiated and documented all end-to-end tests and 





was connected to the three phased array antennas mounted on 


the Comms Tower (11°47'10.71”"N/099° 48’ 34.25”E) via CAT5 





Ethernet cable. The location of endpoint 1, at the Comms 
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Tower, was constant throughout the two day testing 








evolution. Endpoint 2, the remote endpoint, was located in 
the hanger bay (11°47'12.79"N/099°48'29.05”E) approximately 
O.11 miles (0.10 NM) to the west of the Comms Tower for 


baseline tests, see Figure 15. 
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Figure 16. Response Time baseline with GHOSTNet enabled. 
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Figure 17. Throughput baseline with GHOSTNet enabled. 
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Figure 18. Transaction Rate baseline with GHOSTNet enabled. 
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From Figures 16-18, baseline test runs with 
GHOSTNet enabled, the outlier (test run one) was discarded 


for the purpose of analysis. The average Response Time of 





the five test run groups was 0.916 seconds, including a 
minimum time of .880 seconds a maximum time of 1.176 
seconds. The average Throughput measured was 0.011 Mbps, 
with a minimum value of 0.008 Mbps and a maximum of 0.012 


Mbps. The average Transaction Rate recorded was 1.092 





transactions per seconds with a minimum rate of 0.850 per 


second and a maximum rate of 1.137 per second. 


In the next set of test runs, GHOSTNet was 








disabled and produced the results seen in Figures 19-21. Two 


outliers in this group of test runs were excluded (test runs 





two and three) for the purpose of analysis. The average 
Response Time was 0.031 seconds with a minimum time of 
seconds and a maximum of time of seconds. The average 
Throughput measured was 0.360 Mbps with a minimum throughput 
of 0.026 Mbps and a maximum throughput of 2.364 Mbps. The 


average Transaction Rate measured was 34.663 transactions 





per second with a minimum rate of 2.501 per second and a 


maximum rate of 227.273 per second. 
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— vivato_baseline1_httptest.tst:Pair 1 — vivato_baseline2_httptest.tst:Pair 1 
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Figure 19. Response Time baseline without GHOSTNet. 
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Figure 20. Throughput Baseline without GHOSTNet. 
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Figure 21. Transaction Rate Baseline without GHOSTNet. 





b. Test Group 2 — Prachuap Beach Hotel 


The second group of tests was conducted between 


endpoint 1 (Comms Tower) and endpoint 2, which was located 





on the sixth floor observation deck of the Prachuap Beach 
Hotel, on the north bay in Prachuap Khiri Khan, shown in 
Figure 22 (11°48'08.84"N/099°47'58.57”E). The distance 


between the endpoints for this set of tests was 1.29 miles 





(1.12 NM). 
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Figure 22. Prachuap Beach Hotel Response Time with GHOSTNet 
enabled. 
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— yivato_PB Hotel_1_W_GN_NOAES_httptest.tst:Pair 1 — yivato_PB Hotel_2_\W_GN_NOAES_httptest.tst:Pair 1 
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Figure 23. Prachuap Beach Hotel Throughput with GHOSTNet 
enabled. 
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— vivato_PB Hotel_1_W_GN_NOAES_httptest.tst:Pair 1 — vivato_PB Hotel_2_W_GN_NOAES_httptest.tst:Pair 1 
— vivato_PB Hotel_3_W_GN_NOAES_httptest.tst:Pair 1 





Figure 24. Prachuap Beach Hotel Transaction Rate with 
GHOSTNet enabled. 


From Figures 22-24, the average Response Time with 





GHOSTNet enabled measured 1.181 seconds with a minimum time 





of 0.874 seconds and a maximum time of 3.041 seconds. The 
average Throughput measured was 0.009 Mbps with a minimum of 
0.003 Mbps and a maximum of 0.012 Mbps. The average 
Transaction Rate measured was 0.858 transactions per second 
with a minimum rate of 0.329 per second and a maximum rate 


of 1.144 per second. 





In Figures 25-27, with GHOSTNet disabled, two 


outliers (test runs four and _e six) excluded from the 





analysis. The average Response Time measured was 0.026 





seconds with a minimum time of .005 seconds and a maximum 
time of 0.894 seconds. The average Throughput measured was 


0.402 Mbps with a minimum of 0.029 Mbps and a maximum of 
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1.962 Mbps. The average Transaction Rate measured was 38.732 
transactions per second with a minimum rate of 2.804 per 


second and a maximum rate of 188.679 per second. 
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Figure 25. Prachuap Beach Hotel Response Time without 
GHOSTNet. 
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Figure 26. Prachuap Beach Hotel Throughput without GHOSTNet. 
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— vivato_PBHotel_1_NOAES_httptest.tst:Pair 1 — vivato_PBHotel_2 NOAES_httptest.tst:Pair 1 
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Figure 27. Prachuap Beach Hotel Transaction Rate without 
GHOSTNet. 
c. Test Group 3 - PCF Underway at 1NM 





The first underway test conducted between endpoint 
1 (Comms Tower) and endpoint 2 on the PCF (11°46'32.90”"N/ 
099°48'43.30”E) while underway in the south bay, see Figure 
11 above. The PCF was approximately 0.66NM away from the 


Comms Tower during the conduct of the testing. Three 





attempts were made to execute nd-to-end tests from this 
location, but all test runs timed out prior to completion 
and no data was recorded. Testing from one nautical mile 
underway was secured and the PCF moved out to the two 


nautical mile location to proceed with testing. 





d. Test Group 4 — PCF Underway at 2NM 


The fourth group of test runs was conducted 


between endpoint 1 (Comms Tower) and endpoint 2 located 
ap 


onboard the PCF (11°45'27.94"N/099°49'06.09”E), underway in 


the south bay 2 NM south-southeast of the communication 





tower. Due to underway time restrictions, testing was only 
conducted with GHOSTNet disabled. Further testing was 
conducted with GHOSTNet enabled while the PCF was pierside, 
see test six below. Two of the test runs (runs one and two) 
were significant outliers and were excluded from the 


analysis. 


Interpreted from the four acceptable test runs 








seen in Figures 28-30, the average Response Time with 
GHOSTNet disabled was 12.998 seconds with a minimum time of 
7.355 seconds and a maximum time of 37.347 seconds. The 
average Throughput measured was 6.155 Mbps with a minimum of 
2.142 Mbps and a maximum of 10.877 Mbps. The average 
Transaction Rate measured was 0.077 transactions per second 
with a minimum rate of 0.027 per second and a maximum rate 


of 0.136 per second. 
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Figure 28. PCF underway at 2 NM without GHOSTNet. 
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Figure 29. PCF underway at 2NM without GHOSTNet. 
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Figure 30. PCF underway at 2NM without GHOSTNet. 
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e. Test Group 5 — Ao Manao Hotel1/BOQ 


The fifth group of tests were conducted between 
endpoint 1 (Comms Tower) and endpoint 2 located on the 
fourth floor roof access at the Ao Manao_ Hotel/BOQ 


(11°46'35.21"N/ 099°47'50.38”E), seen in Figure 15, on the 





south bay. The distance between the endpoints was 0.93 NM. 
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Figure 31. Ao Manao Hotel Response Time with GHOSTNet 
enabled. 
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Figure 33. Ao Manao Hotel Transaction Rate with GHOSTNet 
enabled. 





From Figures 31-33, the average Response Time with 
GHOSTNet enabled was 1.0327 seconds with a minimum time of 


0.871 and a maximum time of 1.653 seconds. The average 


e)0) 


Throughput measured was 0.010 Mbps with a minimum of 0.006 
Mbps and a maximum of 0.012 Mbps. The average Transaction 
Rate measured was 0.973 transactions per second with a 
minimum rate of 0.605 per second and a maximum rate of 1.148 


per second. 





As seen in Figures 34-36, the average Response 
Time measured with GHOSTNet disabled was 0.670 seconds with 
a minimum time of 0.055 seconds and a maximum time of 18.904 
seconds. The average Throughput measured was 0.137 Mbps with 
a minimum of 0.001 Mbps and a maximum of 2.60 Mbps. The 
average Transaction Rate measured was 13.256 transactions 
per second with a minimum rate of 0.053 per second and a 


maximum rate of 243.902 per seconds. 
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Figure 34. Ao Manao Hotel Response Time without GHOSTNet. 
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Figure 35. Ao Manao Hotel Throughput without GHOSTNet. 
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Figure 36. Ao Manao Hotel Transaction Rate without GHOSTNet. 
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£. Test Group 6 — PCF Pierside 


The sixth group of test runs was conducted between 


endpoint 1 (Comms Tower) and endpoint 2 onboard the PCF 


pierside (11°48'29.33"N/099°48'09.02"E) in the north bay, 





seen in Figure 15. The intent of this testing was to 


conclude the underway tests with GHOSTNet enabled, however 





due to weather restrictions the PCF was forced to remain 


pierside and rig storm lines to ride out the storm. This 


group of tests, with the PCF pierside, was especially 


challenging to complete due to taller vessels, moored on the 


opposite side of the pier, obstructing the LOS between the 


PCF and Comms Tower. 
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Figure 37. Pierside Response Time with GHOSTNet enabled. 
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Figure 38. Pierside Throughput with GHOSTNet enabled. 
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Figure 39. Pierside Transaction Rate with GHOSTNet enabled. 


From Figures 37-39, the average Response Time 





measured with GHOSTNet enabled was 11.4763 seconds with a 
minimum time of 0.914 seconds and a maximum time of 38.854 


seconds. The average Throughput measured was 0.001 Mbps with 
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a minimum of 0.000 Mbps and a maximum of 0.011 Mbps. The 
average Transaction Rate measured was 0.106 transactions per 
second with a minimum rate of 0.027 per second and a maximum 


rate of 1.094 per second. 





In Figures 40-42, only two of the test runs (test 
runs two and six) could be used in the analysis. The other 


four test runs were very close to timing out and as a result 





were extremely inaccurate, producing asymptotic—like 








results. The average Response Time measured without GHOSTNet 
was 0.091 seconds with a minimum time of 0.015 seconds anda 
maximum time of 0.312 seconds. The average Throughput 
measured was 0.366 Mbps with a minimum of 0.033 Mbps and a 
maximum of 1.020 Mbps. The average Transaction Rate measured 
was 35.337 transactions per second with a minimum rate of 


0.054 per second and a maximum rate of 64.935 per second. 
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Figure 40. Pierside Response Time without GHOSTNet. 
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Figure 41. Pierside Throughput without GHOSTNet. 
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Figure 42. Pierside Transaction Rate without GHOSTNet. 
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3. Observations and Further Analysis from Thailand 
Field Testing 


Overall, the field testing conducted in Thailand was 
successful. The results validated the hypothesis that phased 


array antenna technology could duplicate and exceed the 





performance on Monterey Bay during proof of concept testing. 





Performance limitations were noted in the conduct of testing 





which have to do with the mounting of the wireless router on 


the underway vessel. This and other issues will be discussed 





in greater depth below and in the Conclusions = and 














Recommendations section, Chapter VII, respectively. 





a. Exclusion of Outliers 


The test runs that produced outliers in the data 
are excluded from the analysis of the specific group of test 
runs. The outliers are defined as results with 95% 


confidence intervals that did not overlap with the other 





recorded data sets in the group. This indicates that the 





outliers were more than two standard deviations away from 





the other data collected. The data represented in these 





outliers is inaccurate and would have negatively skewed the 


results of the analysis if included. Other characteristics 








of these outliers is the specific test runs (that produced 





them) took approximately 2-3 times longer to execute than 

















the other test runs in the group. This is another symptom 





indicating an error in the conduct of the test run. 


b. Power Issues 


The unpredictable supply of power on the Ao Manao 


Airbase was an ongoing challenge throughout field testing in 
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Thailand. The base power distribution was subject to 


frequent power surges, or brief spikes in voltage, and 





brownouts, brief decreases in voltage. The performance of 





the testing hardware was affected by these fluctuations in 








the power. As a result, each of the phased array antenna 





base stations were directly connected to uninterruptable 








power supplies (UPS). The base stations run off DC power and 





utilize a power supply which converts 110VAC power to 48VDC 


and is directly wired to the panel. The panels’ power 





supplies were plugged into UPS’ (which were connected to 
step-down transformers which converted the 220V/50Hz power, 


from the base power grid, to 110V/60Hz power) for the power 





supplies to convert and supply steady, reliable power to the 
base stations. Two of the base station power supplies were 
rendered inoperable due to the power fluctuations 
experienced at Ao Manao Airbase. One of the power supplies 
was connected to an UPS, but it was not powered “ON,” and 


was therefore unable to provide the necessary protection. 


c. Speed vs. Latency 


At first glance, the results of the network 
performance tests, especially in throughput, seem to be very 


low and not impressive. However, the more important question 








of performance is not raw throughput, but rather the amount 





of latency present. High throughput of 11 Mbps combined with 
high latency translates into poor network performance and is 
no better than the throughput results seen in the field 


tests with low latency. The ability of the network to pass 





the data packets was more than sufficient for the 





application. This is especially true, keeping in mind the 
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relationship between data rate and throughput as discussed 














in the Technical Background, Chapter , A.3.—Data Rate vs. 


Throughput. 


d. GHOSTNet Latency Resolved 


Although resources were unavailable to properly 








resolv th latency issue attributed to tests involving 


GHOSTNet until February 2009, this issue has been corrected. 








The initial hypothesis was that the poor network performance 





noted in tests with GHOSTNet enabled was caused by the 
connections through servers in New Haven, Connecticut and 
Greensboro, North Carolina. To help prove this theory, an 


additional GHOSTNet server was established in Monterey, 





California and endpoint tests were run with GHOSTNet 





enabled. Significant improvements were seen in the test 





results, compared to those recorded at FEX IV, in the areas 





of Throughput, Response Time, and Transaction Rate. More in- 
depth analysis and conclusions were made in ae separate 


thesis about GHOSTNet referenced here.!4 








14 patrick Kilcrease, “Employing a secure virtual private network 
(VPN) infrastructure as a global command and control gateway to 
dynamically connect and disconnect diverse forces on a task force by 
task force basis.” Naval Postgraduate School, September 2009. 
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Vv. CONCLUSIONS AND RECOMMENDATIONS 


A. OVERVIEW 


Although less than 100% of the data was successfully 
collected in each of the test runs of the six groups of test 


operating environments, there are significant advances for 





backhaul communications related to ship-to-shore and ship- 





to-ship test engagements that are prime candidates for data 





collection. Future follow-on iterations of field tests with 


phased array antenna technology could build on these 








measures of ffectiveness and utilize the conclusions and 


recommendations made below. 





B. CONCLUSIONS AND KEY TAKEAWAYS 
1. Environmental Impacts on Network Performance 
The most significant environmental limitations 


encountered during testing were latency as a direct result 








of encryption, LOS obstruction, and power fluctuations. The 





GHOSTNet server latency issue was resolved, as noted above, 
but LOS continues to be a challenging obstacle to overcome 
in a dynamic operating environment. Pierside in the north 
bay, ships across the pier with taller superstructures 
impeded the conduct of network performance tests from the 


PCF. The vessels created significant interference as they 








physically obstructed the LOS of the base station and the 


antenna device mounted on the mast of the PCF. 
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During the 1NM underway test in the south bay, it was 
noted that dense foliage from trees and other vegetation 
were preventing the necessary LOS for the wireless signal to 


reach the PCF from the Comms Tower. The geometry of the 





Situation in the south bay was more favorable once the PCF 
was near the 2NM point from the Comms Tower. This is why 
test results were more favorable at a greater distance vice 


being closer to the signal in the south bay. 


As previously noted, power fluctuations on the base in 


Thailand posed the most significant challenges to the 





performance of the wireless network. The heat and humidity 


of the physical operating environment had much less impact 





than originally anticipated. In fact, successful end-to-end 
tests were conducted during the rainstorm encountered on the 


second day of testing. 


2. Effective Range of Wireless Coverage 





Due to time and weather constraints impacting the 


conduct of further underway field tests, the maximum 





effective range underway was unable to be determined. It 





should be noted, however, that the capability to view live 
video over a wireless network at distances up to and greater 
than 2NM (2.3 miles) is a significant achievement. An 
existing operational deployment of two base stations on the 
Outer Banks, North Carolina covers 15 square miles.1!5 This 
documented operational deployment far exceeds the 2NM 
effective range tested in this research. Therefore, the 


wireless network provided by the phased array antennas 


1s Gardner, David, W. Town picks WiFi over WiMAX for public network. 
May 19, 2005. 
http://commsdesign.com/showArticle. jhtml?articleID=163105779. 
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deployed in Thailand, was reliable within th nvelope of 
two “plus” nautical miles (2+NM) and beyond. Given the 


notional throughput expected from the modulation scheme 





utilized for the specific data rate at these distances, the 


results are in line with factory specifications and can be 





predictable variables given the operational environment.1!° 





33 GHOSTNet Application 


GHOSTNet was a viable tool for securing the 


communications over the wireless network environment 





established during field testing in Thailand. Its ability to 





quickly and easily connect disparate personnel and improve 
their SA on a situation taking place halfway around the 
world was noteworthy. GHOSTNet was a true value added 
component of this research and has many, far-reaching 


applications for further development and implementation.!?!’ 





4. Ruckus Wireless Device 


The Ruckus device certainly allowed for the maximum 





reception of the 802.1lg signal, from the phased array 





antennas on the Comms Tower, inside the pilothouse of the 
PCF while underway and pierside by utilizing the bridge 
mode. The connectivity provided by the device and its 


ability to maintain association with the wireless base 





stations while underway was not reliable when the PCF was 


constantly changing aspect. The sectored antennas ability to 





dynamically associate when the PCF was facing away from the 


Comms Tower was suspect. The Ruckus device would lose 








16 Carpenter and Barrett, Certified Wireless Network. 





17 Kilcrease, Employing a secure virtual private network (VPN) 
infrastructure. 
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connectivity in a 30-degree cutout facing aft of the PCF, as 


shown in Figure 43. When the bearing to the Comms Tower was 





orientated aft of the PCF, within this 30-degree cut-out, 
the association of the Ruckus to the wireless network was 
lost. As the PCF’s orientation changed, and the bearing to 
the Comms Tower was not within this sector, the device would 
re-associate with the network. Any data or video that was 


previously being transferred before the drop in connectivity 





was not received by the intended user. This process of re- 








association to the wireless network and then re-initiating 
the transfer of data took a few minutes to accomplish for 
each occurrence. This did present a challenge when 
transferring data, but proved to be a significant issue when 
transmitting streaming video, especially as the bearing to 
the Comms Tower was constantly changing due to the vessel 
being underway. The signal was interrupted and any video 


captured while the device was in the process of re- 








association with the wireless network was never seen by the 


intended remote stations. Suggestions of how to better solve 





this issue are listed below in the recommendations section. 








—. 
Figure 43. 30-degree cut-out aft experienced by Ruckus device 


mounted to mast of RIN PCF. 
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5: Wireless Network Scalability 





Due to time constraints and power issues, insufficient 





testing with respect to multiple streaming video feeds was 





conducted to make a clear determination of how this would 





affect the scalability of the wireless network. The 


fluctuations in power rendered a fourth wireless base 





station inoperable. This additional wireless panel, separate 








from the three mounted on the Comms Tower, was overlooking 


the south bay from the Ao Manao Hotel/BOQ, seen in Figure 44 





and theoretically would have improved the conduct’ of 





underway tests executed in the south bay by providing better 


coverage. 


What is known is that if the challenge of wirelessly 





associating to the network while changing aspect in an 





underway vessel can be improved, the wireless network is 
capable of being applied to real-world environments. 


Recommended solutions to this problem are listed below and 





in the next section. The current configuration of technology 








could be deployed as-is to port security elements that carry 





out inspections on ships at anchor and/or pierside, where a 
less dynamic change in aspect would allow the smart router 
to remain associated to the wireless network. The phased 


array antenna technology is more than capable of scalability 





for real-world applications and its primary limitation is 





the performance and capabilities of the receiving antenna 


employed by the end user. 
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Figure 44. Wireless base station overlooking south bay, from 
the 4th floor roof access of the Ao Manao Hotel. 





C:; RECOMMENDATIONS FOR FUTURE STUDY AND APPLICATION 
al Utilizing an Omnidirectional Antenna Underway 
Employing an omnidirectional antenna with the 


technological configuration outlined in the field testing 


would potentially resolve the association/disassociation 








issues experienced by the dynamically adjusting antennas in 
the Ruckus device and could increase performance of the 
wireless network. The dipole antenna construction of the 


omnidirectional antenna is much better suited to this 





application, as its receiving gain pattern is 360 degrees on 


a horizontal plane. Furthermore, the omnidirectional antenna 








should be utilized when the location of the receiver is 


“highly mobile.”18 


18 p an, Network+ Guide to Networks, 125. 
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The Ruckus device, and its six, dynamically adjusting 


sectored antennas, was acting primarily as a wireless bridge 








by linking the wireless network of the phased array antennas 








and the PCF. Bridge mode is not the optimal performance 


configuration in this specific application, as the bearing 





to the wireless signal was constantly changing. The Ruckus 





would be much better suited to operate in route mode to 
extend the wireless footprint and quality of the 802.11lg 


signal, received by the omnidirectional antenna, from the 











phased array base stations to the immediate vicinity of the 








PCF where it would be mounted. Although this configuration 


was unable to be field tested, it is recommended as the 





optimal solution to the specific application based on the 





testing and observations noted in this research. 


2. Integrated Video/Voice Application Underway 





An IP-routable camera with a microphone or an audio 


line into the feed should be explored to enable simple, two- 





way video and voice communication. This could be implemented 
in a variety of COTS hardware or software solutions. Skype, 
an internet video/voice application, was successfully 


utilized via the wireless network to communicate between th 








JOCC and the PCF during the storm, on the second day of 


testing. While the PCF was pierside in the north bay, and 








the ships obstructing the wireless signal had gone out to 


sea, RIN personnel were able to quickly and easily interact 





using this internet application. 
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APPENDIX A —- WEATHER DATA 
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Table 6. Wave height data (in meters and feet) for Monterey Bay, CA on February 14, 2008 
(from NOAA Web site). 
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Table 7. 


Table 8. 


8:54 AM 


Humidity: 


Sea Level 
Pressure: 


30.04 in 


Visibility: 


10.0 miles 


Wind Dir: 


NW 6.9 mph 


Conditions: 





9:54 AM 


30.06 in 


10.0 miles 


Variable | 4.6 mph 





10:54 AM 


30.05 in 


10.0 miles 


NNE 15.0 mph 


26.5 mph 





11:54 AM 


30.05 in 


10.0 miles 


NNE 15.0 mph 


23.0 mph 





12:54 PM 


30.04 in 


10.0 miles 


NW | 10.4 mph 


16.1 mph 





1:54 PM 


30.03 in 


10.0 miles 


NW 9.2 mph 





2:54 PM 





Weather data points 











30.04 in 





10.0 miles 





for Monterey Bay, 





9.2 mph 


Underground Web site). 









































Humidity: “lene Visibility: Precip:| Events: | Conditions: 
8:00AM | 80 |75.5F| 76% | 29.79in | 4miles |ESE|1mph]| - : Mostly Cloudy 
9:00AM | 838 | 76— | 76% | 29.89in | Smiles |ESE|2mph| - : Mostly Cloudy 
10:00 AM| 87% | 77% | 75% | 29.89in | 6miles |ESE|3mph|_ - ; Clear 
11:00AM] 89% | 78— | 74% | 29.89in | 6miles |ESE|4mph|_ - : Clear 
12:00 PM| 92% | 79~ | 74% | 29.86in | 6miles |ESE|5mph|_ - : Clear 
1:00PM | 95% | 80F | 74% | 29.86in | 6miles |ESE| 6mph| - : Clear 
2:00PM | 93 | 79% | 74% | 29.80in | 6miles |ESE|5mph]| - : Clear 
3:00PM | 92 | 78F | 74% | 29.77in | Smiles |ESE|4mph]| - : Mostly Cloudy 



































Weather 


data points for Prachuap Khiri Khan, 
Weather Underground Web site). 
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Thail 


land, 


on March 24, 2008 


CA on February 14, 2008 (from Weather 


(from 


Table 9. 


75°F 


Humidity: 


Sea Level 
Pressure: 


29.79 in 


Visibility: 


4 miles 


Calm 


Events: 


Conditions: 


Mist 





77°F 


29.89 in 


5 miles 


Calm 


Mostly Cloudy 





77°F 


29.89 in 


2 miles 


ESE 


Rain 


Light Rain 





75.2 °F 


29.89 in 


2 miles 


ESE 


Thunderstorm 


Heavy Rain 





75.2 °F 


29.86 in 


3 miles 


SE 


Rain 


Light Rain 





74 °F 


29.86 in 


5 miles 


South 


Mostly Cloudy 





77°F 


29.80 in 


5.6 miles 


South 


Mostly Cloudy 








77°F 





Weather data points 








29.77 in 





5.6 miles 





South 


for Prachuap Khiri 
Weather Undergrou 


Lo 
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Mostly Cloudy 
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APPENDIX B - 


TECHNICAL SPECIFICATIONS 





VP2210 —- Vivato 802.11g Outdoor Wi-Fi Base Station 








WIRELESS SPECIFICATIONS 



























































Network Standard IEEE 802.11b/g 
Frequency Band/Operating Channels Dist a DANES SS (Elel4 7 North America 
Channel Set (1-11) 
Supported Data Rates SO2 1M i, 2, So Sip ILilMlsjas 
S02 ilies 6,9, 2, 18,24, 36, SélMloyjas 
Media Access Protocol Carrier Sense Multiple Access/ 
Collision Avoidance 
Receive Sensitivity Rate (mode) receiver sensitivity 
54 (OFDM) -72dBm iil (CC) =SOcheim 
CCK: 8% PER, 1000 bytes 48 (OFDM) -76dBm 5.5 (CCK) =OSclein 
OFDM: 10% PER, 1024 bytes 36 (OFDM) -81dBm 2 (CCK) —-94dBm 
24 (OFDM) -—84dBm (CCK) oclam 
18 (OFDM) -87dBm 
12 (OFDM) -90dBm 
9 (OFDM) -91dBm 
6 (OFDM) -92dBm 
Operating Range Outdoor Line of Sight: 
Data Range Data Range 
Rate (meters) Rate (meters) 
54Mbps 650m 11Mbps 4,600m 
48Mbps 900m 5.5Mbps 5, ZO 
36Mbps 1,400m 2Mbps 5,400m 
24Mbps 1,800m 1Mbps 5) 7 SOOina 
18Mbps 2, 300m 
12Mbps 2, 950m 
9Mbps 3,200m 
6Mbps 3,500m 

















Users per Devic 


Up to 50 simultaneous users/1,530 


associated users 








EIRP (Max. ) 





WIRED SPECIFICATIONS 
Network Interfaces 





41dBm typical @ 802.11b rates, 

21dBi antenna 
37dBm typical @ 802.11g rates, 
21dBi antenna 




















2° — IEEE 80223 auto-sensing 10/100 
Base T Ports 
























































SHC (CUR I II 

Static and Dynamic WEP Encryption 40- and 104-bit (RC*) Encryption 

WEA 802.1x —- EAP-TLS, EAP-TTLS, PEAP, 
TKIP/MIC 

802.11i/WPA2 NAS Sujsjoortecs SOZ,ikxe = mWAP—TLS), 
EAP-TTLS, PEAP, TKIP/MIC 

WGC Inter-client communication filtering 

Multiple SSID/VLAN Support for up to 16 MSSID/VLANs 
each capable Ons supporting a 


different security model 











ENVIRONMENTAL SPECIFICATIONS 
Dimensions 





30 (a) oe SOM Cal) xe Ia (ini) 
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VP2210 —- Vivato 802.11g Outdoor Wi-Fi Base Station 

Power Requirement 48VDC, 200 Watts maximum 

Weight 83lbs. (37.64Kg.) 

Operating Temperature =A seo. Isl ir 

CERTIFICATIONS 

Radio mec 47 CimR Paice 15, Class 1B 

Industry Canada RSS 210 
Figure 45. Vivato technical specifications (from Vivato Web 

site). 





Ruckus MediaFlex 2835 Smart Wi-Fi Router 





Physical Characteristics 
Power External power adapter 
Majic s LLO=2ZAOwy AWE 
Hinjowle § ZO=2Z4AzOw WE 
Owhejoukes IAW Ie, IVA 











Physical Size 14, 20m (Cb), 12 .2em (nh), Ws sem (Esp) 

Weight 200 grams 

Antenna Internal software-configurable antenna 
array with six directional high-gain 





elements that provide up to 63 unique 
SINC SiMiMel jose ie Sicia's} 


























Ethernet Ports 5 ports, auto MDX, autosensing 10/100 mbps, 
RJ-45 

LED display Power/status, Ethernet status, wireless 
status, wireless network quality indicator 

Environmental conditions Operating Temperature: 32°F (0°C)-104°F 
(40°C) 


Operating humidity: 15%-95% non-condensing 





Performance and Supported 




















Configurations 

Concurrent stations -— Up to 48 (open, WEP or WPA-AES) 
= Up eO® 22 (cor WRA—WAILE)) 

Target UDP throughput 15-20 Mbps (54 Mbps bursts) sustainable 
throughout a 4000 square foot (372m?) 
public area 

Simultaneous video 2 to 3 simultaneous MPEG-2 or 

transmission 4 to 6 MPEG-4 standard definition streams 





or single 10Mbps+HD stream with concurrent 
background traffic 





Traffic Management and 
Quality of Service 














Classes of service Voice, video, best effort and background 
Authentication/Tunneling -— L2TP (secure and unsecure) 
= APS 
MAC address entries 128 
Access control Layer 2 MAC addresses 


Layer 3 IP addresses 
bewyeie 4 WO jo@iwicls 








Management (when individually 
managed) 
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Ruckus MediaFlex 2835 Smart Wi-Fi Router 

















Configuration Web user interface, TR-069, Bonjour, CLI 
GQelinct) tao SleeLuahE/7S en SNMEM siechesEsiteisess 
interface 

Login User 
Administrator 

SEL SE LSS LAN, wireless and associated stations 


(accessible via Web UI) 





Software update 





— FTP or TETIP, remote auto available 
— Accessible via WebUI 





Wi-Fi 
Standards 


802.11b/g 





Supported data rates 


54,48, 36,24,18,12,11,5.5,2, 1Mbps 





Channels 


US/Canada: 1-11 
Europe (ETSI X30): 1-13 








Auto channel selection 


Supported 





RF power output 


23 dBm for wireless-B 

23 dBm for wireless-G 

— Country-specific power settings are 
configurable 











Transmit power control Supported 
BSSID IW CO se OibLe 
Power Save Supported 





CEC LIELE Se LOMS 





ECC (WsS.), © CHW), OWA ((el@ing 
KONG), IC (Cainacea), C-wiek (Aus/ 
NZ), IDA (Singapore), MIC (Korea), 
DGT (Taiwan) WEEE/ROHS compliance 





























Wireless Security 
Routing 


WEP, WPA-PSK, WPA-TKIP, WPA2-AES 
DEC! Clee Swyppowc, DRIP Server Suppose, 
NAT and PPPoE 











Multicast Video 
Multicast operations 














-Directs multicast IPTV packets to each 
receiving station within the designated 
multicast group using the optimum data rate 
and antenna selection 

-Automatic classification into video 








Figure 46. Ruckus technical specifications (from Ruckus Web 


site). 
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